This is a maintenenance release for MonitorWare Agent. It includes some bugfixes as well as a new rule date condition which can be used to process events starting from a certain date. A new Service called Passive Syslog Listener which is bind to Syslog Queues has been added as well. It builds in Syslog Queues created by the new Syslog Queue Action. Please see the manual for more details about the new Service/Action.

Version 10.1 is a free download. Customers with existing 9.x keys can contact our Sales department for upgrade prices. If you have a valid Upgrade Insurance ID, you can request a free new key by sending your Upgrade Insurance ID to sales@adiscon.com. Please note that the download enables the free 30-day trial version if used without a key – so you can right now go ahead and evaluate it.

MonitorWare Agent 10.0 Released

Features

New Configuration Client running on Microsoft .Net Framework. If wanted, the old client application can be installed manually as "MonitorWare Legacy Client".

The Agent can be switched from registry to file based configuration support. Requires usage of the new configuration client.

EventLog Monitor Classic(V1): Support for dynamic Eventlog files added.
Kindly use an asterix (*) in the eventlog filename to activate it, for example: \\netappdevice\c$\etc\log\adtlog.*.evt
When activated, EventLog Monitor will process all matching files automatically. The feature was primary added for NETAPP users who have dynamic filenames.

New System Property added to created UUID’s called "$NEWUUID". Generates a random generated 128Bit UUID (Universally Unique Identifiers).

File Action: Seqmented Files or Circular Logging now also works with dynamic filenames.

This new major release adds full support for Windows 2012 R2 and also has been verified to work on Windows 10 preview versions.

The new major version is a milestone in many ways. Most important the performance of the core engine has been considerably increased. All existing configurations will benefit from this. Also a new Configuration Client has been added which has been rewritten using the .Net Framework (Like the InterActive Syslog Viewer). With the new Configuration Client, we also introduce support for a new file based configuration format (as an alternative to the registry-based method). MonitorWare Agent can now run from a configuration file and save it state values
into files.

We also extended the classic EventLog Monitor to support multiple dynamic *.evt files for NetApp customers.

Version 10.0 is a free download. Customers with existing 9.x keys can contact our Sales department for upgrade prices. If you have a valid Upgrade Insurance ID, you can request a free new key by sending your Upgrade Insurance ID to sales@adiscon.com. Please note that the download enables the free 30-day trial version if used without a key – so you can right now go ahead and evaluate it.

Version 9.3 is a free download. Customers with existing 8.x keys can contact our Sales department for upgrade prices. If you have a valid Upgrade Insurance ID, you can request a free new key by sending your Upgrade Insurance ID to sales@adiscon.com. Please note that the download enables the free 30-day trial version if used without a key – so you can right now go ahead and evaluate it.

Version 9.2 is a free download. Customers with existing 8.x keys can contact our Sales department for upgrade prices. If you have a valid Upgrade Insurance ID, you can request a free new key by sending your Upgrade Insurance ID to sales@adiscon.com. Please note that the download enables the free 30-day trial version if used without a key – so you can right now go ahead and evaluate it.

Logs can now be normalized into XML, CSV and JSON formats. Furthermore, the normalization result is now fully available as regular properties and can be used both for output actions as well as filtering decisions.

This version permits monitoring remote machines via the V2 Event Log Monitor. This enables even better and remote monitoring capabilities.

International character set support has been improved. The email action now supports subject field encoding in UTF8, SHIFT-JIS, JIS and EUC-JP.

Version 9.1 is a free download. Customers with existing 8.x keys can contact our Sales department for upgrade prices. If you have a valid Upgrade Insurance ID, you can request a free new key by sending your Upgrade Insurance ID to sales@adiscon.com. Please note that the download enables the free 30-day trial version if used without a key – so you can right now go ahead and evaluate it.

Version 8.2 is a free download. Customers with existing 11.x keys can contact our Sales department for upgrade prices. If you have a valid Upgrade Insurance ID, you can request a free new key by sending your Upgrade Insurance ID to sales@adiscon.com. Please note that the download enables the free 30-day trial version if used without a key – so you can right now go ahead and evaluate it.

Adiscon is proud to announce the 8.1 release of MonitorWare Agent. This release includes performance enhancements and bugfixes.

With this release, we offer support for the "CEE enhanced Syslog Format", a format that intends to ease event processing. A multi-vendor community including Red Hat, MITRE, Balabit and Adiscon will build a better logging infrastructure and CEE enhanced syslog is a major building block. Adiscon is proud to be the first vendor to offer support for this format inside a tool for Microsoft Windows.

There is also an overall performance boost in the core engine. Also UDP Spoofing for IPv4 is now supported.

Version 8.1 is a free download. Customers with existing 11.x keys can contact our Sales department for upgrade prices. If you have a valid Upgrade Insurance ID, you can request a free new key by sending your Upgrade Insurance ID to sales@adiscon.com. Please note that the download enables the free 30-day trial version if used without a key – so you can right now go ahead and evaluate it.

MonitorWare Agent 8.0 Released

Build-IDs: Service 8.0.411, Client 8.0.1342

New Additions

Added new Action called Send MSQueue:
This action can send messages to the Microsoft Message Queuing Server. It is possible to customize the Queue Label, Priority and Queue Body. The Queue Body contains the message property by default as UNICODE (UTF16) string. In order to use this action, you need to have the Microsoft Message Queuing (MSMQ) Server installed.

Added support for IPv6:
Support for IPv6 has been added into all network related facilities of the engine. All network related actions will automatically detect IPv6 and IPv4 target addresses if configured. You can also use DNS resolution to resolve valid IPv6 addresses. Network related Services can either use IPv4 or IPv6 as internet protocol. In order to support both protocols, you will need to create two services. The only exception is the RELP Listener, which uses IPv4 and IPv6 automatically if available.

SETP service / Action:
Extended MonitorWare SETP Protocol to V3. If Sender and Server support V3 or higher, UTF8 is now used to encode/decode messages. This maintains the correct character encoding after the messages is received and rebuild internally.

Syslog Listener Service:
Added option to add ProcID into SyslogTag for RFC 5424 Header parsing. This was previously default. The Option is disabled by default now making it easier to filter for the SyslogTag.
Added option to Force UTF8 Decoding in Syslog Service. A new Encoding configuration tab lets you decide, if you which to automatically detect the encoding, force UTF8 decoding, or use system default encoding.

EventLog Monitor V2:
Added support for polling EventLog Records. This works almost like in the old EventLog Monitor, the Eventlog channel is polled frequently and new EventLog records are processed only. By default, the "Subscription Model" is used which processed events in Realtime.
Added support to read and process EVTX files. This requires the new "Eventlog Polling" method. It is also possible to update the EVTX files while MonitorWare Agent is running.

Upgraded internal NET-SNMP library to version 5.6.1.

SNMP Trap Receiver / Monitor / Send SNMP Action:
Added support for IPv4/IPv6 and TCP/UDP. A combination of UDP/TCP and IPv4/IPv6 can now be configured. (more…)